In the Linux kernel, the following vulnerability has been resolved:
io_uring/af_unix: disable sending io_uring over sockets
File reference cycles have caused lots of problems for io_uring in the past, and it still doesn't work exactly right and races with unix_stream_read_generic(). The safest fix would be to completely disallow sending io_uring files via sockets via SCM_RIGHT, so there are no possible cycles invloving registered files and thus rendering SCM accounting on the io_uring side unnecessary.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.205-195.804Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.145-95.156Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfo | Aug 28, 2024 | May 14, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.72-96.166Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-libbpf | Feb 17, 2025 | May 8, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 14, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-preemptUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-preempt-devel | Jun 13, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 14, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub